Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

r128gain-0...54.dll

windows7-x64

3

r128gain-0...54.dll

windows10-2004-x64

3

r128gain-0...53.dll

windows7-x64

1

r128gain-0...53.dll

windows10-2004-x64

1

r128gain-0...-2.dll

windows7-x64

1

r128gain-0...-2.dll

windows10-2004-x64

1

r128gain-0...54.dll

windows7-x64

3

r128gain-0...54.dll

windows10-2004-x64

3

r128gain-0...51.dll

windows7-x64

1

r128gain-0...51.dll

windows10-2004-x64

1

r128gain-0...x.html

windows7-x64

1

r128gain-0...x.html

windows10-2004-x64

1

r128gain-0...eg.exe

windows7-x64

1

r128gain-0...eg.exe

windows10-2004-x64

1

r128gain-0...in.dll

windows7-x64

1

r128gain-0...in.dll

windows10-2004-x64

1

r128gain-0...rl.dll

windows7-x64

1

r128gain-0...rl.dll

windows10-2004-x64

1

r128gain-0...ox.dll

windows7-x64

1

r128gain-0...ox.dll

windows10-2004-x64

1

r128gain-0...52.dll

windows7-x64

1

r128gain-0...52.dll

windows10-2004-x64

1

r128gain-0...ox.exe

windows7-x64

1

r128gain-0...ox.exe

windows10-2004-x64

1

r128gain-0...-0.dll

windows7-x64

1

r128gain-0...-0.dll

windows10-2004-x64

1

r128gain-0...-2.dll

windows7-x64

3

r128gain-0...-2.dll

windows10-2004-x64

1

r128gain-0...in.exe

windows7-x64

1

r128gain-0...in.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    188s
  • max time network
    200s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 12:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    r128gain-0.9.7-2/r128gain-tools/avcodec-54.dll

  • Size

    2.8MB

  • MD5

    1fa7fe1bc82c393d6c753b87908b951f

  • SHA1

    394e224b2a77759603145398216bfff4f72dff55

  • SHA256

    46c74eb8845547313f6cd08bd7714dcf68a517c9607a32d203a6f99f3253e770

  • SHA512

    84968fec0853b2d54f5df4cb6b56ebab736be9b36a431ada46784ac0510660f6f01ba93af906610d6d97e151e2c61178ba53243d9af5aed73336f44fede4034a

  • SSDEEP

    49152:+9ElWfImrFUyDEME/dPO9/y4DoGaCWOXeq4pzlZoVPRzfMnEGwrc:+9I8ImRU7MqdPO9/y4DoGaCNXeq4bZo9

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avcodec-54.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:740
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avcodec-54.dll,#1
      2⤵
        PID:4996
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 604
          3⤵
          • Program crash
          PID:956
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4996 -ip 4996
      1⤵
        PID:4952

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4996-1-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-3-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-4-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-5-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-2-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-6-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-7-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-8-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-9-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-10-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-11-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-13-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-14-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-15-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-16-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-17-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-18-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-19-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-21-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-20-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-24-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-25-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-26-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-28-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-29-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-23-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-31-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-30-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-33-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-35-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-37-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-39-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-40-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-41-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-42-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-43-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-38-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-34-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-45-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-47-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-48-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-49-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-46-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-50-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-51-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-52-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-54-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-55-0x000000006A0C0000-0x000000006A569000-memory.dmp

        Filesize

        4.7MB

        Download

      • memory/4996-57-0x0000000068B80000-0x0000000068BAC000-memory.dmp

        Filesize

        176KB

        Download